Block USB writes access while USB Keyboard/Mouse works

How to Block USB write access from Puppet Agent, but Agent should be able to use USB Keyboard/Mouse, Note:- Agent have root access.
Can someone please tell what node is required to use in Puppet Master and if you have Source Code then please share.

Comments

This is a quite OS-specific question and hardly needs any special Puppet treatment. U just use e.g. `exec` resources or (configuration) `file` resources as you usually do. May I ask anyway, what's this good for? Maybe u just have some “wrong” intention, an illusive perception of how things're goin'.

We simply put hot glue in public accessible clients, ensure you can't access the sockets panel without breaking the chassis (kensington lock), and that's that. A software approach could be bypassed. Starting at the BIOS level.